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OBSCURING DATA IN AN AUDIOVISUAL PRODUCT 

The present invention relates in general to a method 
and apparatus for use in creating or reproducing an 
5 audiovisual product. In particular, the present invention 
relates to a method and apparatus for use in controlling 
access to an audiovisual product, by obscuring data within 
the audiovisual product. 

10 It is desired to control access to an audiovisual 

product. In particular, it is desired to restrict 
opportunities that currently exist for audiovisual content 
to be viewed or otherwise accessed without authorisation. 

15 In general terms, audiovisual content such as a movie 

or other presentation is formed by gathering together many 
small sections or clips of raw audio and visual content. 
This is usually termed an "authoring" process wherein the 
raw sound clips and video clips are progressively 

20 assembled and edited together to form the finished 
audiovisual product. The audiovisual product is then 
recorded on some form of recording media. Traditionally, 
this would be an analogue medium such as celluloid film or 
analogue video tape (e.g. VHS format video tape) . More 

25 recently, it has become possible to record audiovisual 
content onto random access media including in particular 
optical disk media such as DVDs, or other forms of random 
storage such as magnetic hard drives. These random access 
media have many advantages in terms of size, data 

30 capacity, playback speed, image quality and so on. 
However, a disadvantage has also been identified in that 
it is- relatively easy to view or otherwise access a stored 
audiovisual product, without authorisation. 
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An optical disc is a convenient storage media for many 
different purposes. A digital versatile disc (DVD) has 
been developed with a capacity of up to 4.7Gb on a single- 
5 sided single-layer disc, and up to 17Gb on a double-sided 
double-layer disc. There are presently several different 
formats for recording data onto a DVD disc, including DVD- 
Video, DVD-Audio, and DVD RAM, amongst others. Of these, 
DVD-Video is particularly intended for use with 

10 pre-recorded video content/ such as a motion picture. As 
a result of the large storage capacity and ease of use, 
DVD discs are becoming popular and commercially important. 
Conveniently, a DVD-Video disc is played using a dedicated 
playback device with relatively simple user controls, and 

15 DVD players for playing DVD-Video discs are becoming 
relatively widespread. More detailed background 
information concerning the DVD-Video specification is 
available from DVD Forum at www . dvdf orum. org , and 
elsewhere.. 

The DVD-Video specification contains a number of 
built-in copy-protection features that aim to protect the 
audiovisual data content of the disc. These include 
Content Scrambling System (CSS), used to encrypt blocks of 

25 audio-video data to prevent such data being played 
separately from the DVD-Video presentation; and 
Macrovision Copy Protection, used to prevent video being 
copied using recording devices. Both of these systems are 
interpreted by the DVD-Video player that performs the 

30 appropriate function during .playback. While these 
approaches are effective in protecting data content for 
average consumers, "reverse engineers 7 ' who are skilled and 
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motivated to create copies of discs or parts of discs now 
easily defeat both systems. 

A problem has been identified in that, within the DVD- 
5 Video specification, there are no built-in facilities by 
which content can be held securely on a disc, whilst 
remaining out of the reach of a reasonably competent 
reverse engineer. As an example to illustrate this 
problem, DVD-Video discs sometimes contain so-called 

10 "Easter Eggs" which are hidden data on a disc that are 
accessed such as by inputting a particular key combination 
(e.g. press a "left arrow" key within 5 seconds of a 
certain menu appearing) . A reverse engineer can easily 
access, such content without knowing the key combination, 

15 simply by extracting .the relevant audio-video objects 
directly from the disc. There are a number of DVD-Video 
interrogation software packages available that can be used 
to x rip' each of the individual video presentations on a 
disc/ See, for example, www . dvd-ripper . com , amongst many 

20 others. 

US 6,161,179 (WEA Manufacturing, Inc) discloses a key- 
based protection method for light-readable discs, wherein 
a disk player provides a unique key each time a disk is 

25 played. The user communicates the unique key to a 
transaction service, and receives an unlock key in return. 
The user communicates the unlock key to the disk player. 
The disk' player then confirms that the unlock key and the 
unique key have a predetermined relationship, before 

30 playing the disk. This known protection method allows pay- 
per-view or other pay-per-use commercialisations of an 
audiovisual product distributed on a light-readable disk, 
such as in a DVD-Video format. 
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There are a wide range of applications where a greater 
level of security and protection is required over and 
above that afforded by the known copy-protection 
5 approaches • These problems arise not only in relation to 
DVD-Video format optical disks but occur in many other 
environments, especially where audiovisual content is 
recorded onto a random access storage medium. 

10 An aim of the present invention is to provide, at 

least in some preferred embodiments thereof, a method and 
apparatus for use in creating and/or reproducing an 
audiovisual product, . by which a user's access the 
audiovisual product is restricted. In particular, an aim 

15 of the present invention is to restrict copying, viewing 
or other unauthorised access to an audiovisual product. 

An aim of at least some embodiments of the present 
invention is to provide a method and apparatus for use in 
20 creating or reproducing an audiovisual product, by which 
even a skilled reverse engineer is faced with substantial 
obstacles that inhibit free and unfettered access to the 
audiovisual product. 

25 According to the present invention there is provided 

an apparatus and method as set forth in the appended 
claims. Preferred features of the invention will be 
apparent from the dependent claims, and the description 
which follows . 

30 

Generally, an -audiovisual product appropriate to the 
present invention has plurality of cells of audiovisual 
data, whose playback is controlled by one or more sequence 
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instructions. Suitably, each of. the cells and each of the 
sequence instructions have a predetermined structure 
location within the audiovisual product, which enables 
navigational movements within the audiovisual- product, 
5 such as from cell to cell and from one sequence 
instruction to another. 

One aspect of the present invention relates to the use 
of an access- code to control access to an audiovisual 
10 product, as a form of unlocking process. 

In- one exemplary aspect of the present invention there 
is provided a method for use in creating an audiovisual 
product, comprising the steps of: receiving original 

15 audiovisual data intended for playback according to an 
original content sequence; dividing the original 
audiovisual data into a plurality of cells; creating a 
plurality of sequence instructions each representing a 
playback sequence for playing back the cells in a 

20 specified order; allocating the plurality of sequence 
instructions each to one of a plurality of structural 
locations within the . audiovisual product; and producing a 
destination function operable, based on an access code, to 
calculate a destination structural location amongst the 

25 plurality of structural locations and thereby . select one 
amongst the plurality of .sequence instructions. 

In another exemplary embodiment of the present 
invention there is provided a method for use in 
30 reproducing an audiovisual product, comprising the steps 
of: receiving an access code; calculating a destination 
structure location within the audiovisual product by 
applying a destination function to the access code; and 
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jumping to the calculated destination structure location 
to thereby select a sequence instruction corresponding to 
that location. 

5 In use, a destination structure location within the 

audiovisual product is "calculated by '■ applying a 
destination function to a received access code. Jumping to 
the calculated destination structure location selects a 
sequence instruction corresponding to that location. The 
10 selected sequence instruction consequently initiates 
reproduction of a sequence of the cells of audiovisual 
data in the audiovisual product. 

Preferably, the access code is input during playback 
15 of the audiovisual product. Most preferably, the access 
code is input by a user through an input device such as a 
keypad or remote control unit or other communications 
device. As one example, the access code is a numerical 
code (e.g. 1234) input through a visual representation of 
20 a numerical keypad. 

Preferably, " the destination function applied to the 
access code is a mathematical function that returns a 
numerical value of the destination location dependent upon 

25 the received access code. The access code may take any 
suitable form but preferably comprises a numerical value 
within a predetermined range, such that the destination 
function when applied to the numerical value of the access 
code calculates the structure location of the correct 

30 sequence instruction and so reveals protected original 
audiovisual data such as an "Easter egg" feature or a 
section ' of a movie. By contrast, when the destination 
function is applied to an incorrect numerical value, some 



WO 2004/1 09678 PCT/G B2004/002388 

7 

other structure location is derived. For example, the 
destination function leads to a structure location which 
causes a message to be displayed such as "Access Denied" , 
or leads to an incorrect sequence instruction which 
5 results in unsatisfactory playback of the original 
audiovisual data. 

The destination function suitably comprises a one way 
hash function. Preferably, the destination function 

10 operates on at least two access .codes each having 
numerical values. Preferably, the destination function is 
applied to generate - a first access code for display to a 
user, and then to operate on a second access code- provided 
in return. The destination function may generate a seed 

15 and apply a transformation to generate the first access 
code, such that a seed of the first access code is held 
secret and is not revealed to a user. 

This aspect of the present invention may be embodied 
20 in many different specific forms, according to the manner 
in which the access code is related to the destination 
function, and the manner in which audiovisual content is 
thereby unlocked for enjoyment by the user. This 
unlocking method is particularly useful in preventing free 
25 and unfettered access to an audiovisual product by 
ordinary consumers. That is, most ordinary consumers will 
only have access to the audiovisual product, or selected 
■ locked sections of the audiovisual product, once they have 
possession of a correct unlocking access code. 

30 

Another aspect of the present invention relates to 
obscuring data within an audiovisual product. 
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In one exemplary embodiment the present invention 
provides a method for use in creating an audiovisual 
product, comprising the steps of: receiving original 
audiovisual data intended for playback according, to an 
5 original content sequence; dividing the original 
audiovisual data into a plurality of cells; and creating a 
plurality of sequence instructions each representing a 
playback sequence for playing back the cells in a 
specified order, including: at least one correct sequence 
10 instruction where the playback sequence reproduces the 
original content sequence; and a plurality of incorrect 
sequence instructions where the playback sequence does not 
reproduce .the original content sequence. 

15 In another exemplary embodiment the present invention 

provides a method for use in reproducing an audiovisual 
product, comprising the steps of: receiving the 
audiovisual product, wherein a plurality of sequence- 
instructions include at least one correct sequence 

20 instruction for reproducing the audiovisual product 
according to an original playback sequence, and ■ a 
plurality of incorrect sequence instructions which do not 
reproduce the audiovisual product according to the 
original playback sequence; selecting one amongst the 

25 plurality of sequence instructions; and reproducing the 
audiovisual data in the cells according to the selected 
sequence instruction. 

This aspect of the present invention provides a simple 
30 but effective mechanism for controlling access to the 
original audiovisual data presented in the audiovisual 
product. Original content is divided into cells, which 
are to be played back in an order according to a playback 
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sequence instruction. One or . more correct sequence 
instructions, which allow an original content sequence to 
be reconstructed from the cells, are themselves hidden 
amongst a plurality of incorrect sequence instructions. 

5 Advantageously, a relatively large number of sequence 
instructions are created, where only relatively few (e.g. 
one or two) properly play back the cells to reconstruct 
the original content sequence. Suitably, the remaining 
large number of incorrect sequence instructions each 

0 result in an unsatisfactory playback • of the audiovisual 
data from the cells. Such obfuscation of the correct 
sequence instructions leads to secure and reliable control 
of access to the original audiovisual data. Only a user 
who is able select the correct sequence instruction will 

5 be able to reveal the original audiovisual data. 

Preferably, the plurality of sequence instructions are 
formed as multiple permuted sequences, where only one such 
sequence corresponds to the original content sequence. 

0. Each of the other multiple permuted sequences reproduces 
the audiovisual data in the cells, but not according to 
the original content sequence. Hence, the sequence 
instructions each closely resemble one another and it is 
relatively difficult for a reverse engineer to determine 

5 which one is correct. As a result, the correct sequence 
instruction is obfuscated amongst the multiple permuted 
incorrect sequence instructions. 

In one preferred embodiment of the present invention, 
0 the cells are arranged other than according to the 
original content sequence. That is, the cells are 
rearranged to provide a new, jumbled, sequence of cells 
that obscures the original audiovisual data. Recording the 
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cells in the jumbled sequence means that a reverse 
engineer cannot easily recreate the original audiovisual 
data from the cells . Knowledge of a correct sequence 
instruction is also required, in order to correctly 
5 reproduce the original content sequence. 

One aspect of the present invention concerns addition 
of one or more erroneous "red herring" cells, which are 
not proper to an original content sequence. 

10 -." 

In one exemplary embodiment the present invention 
provides a method for use .. in creating an audiovisual 
product/ comprising the steps of: receiving original 
audiovisual data intended for playback according to an 

15 original content sequence; dividing the original 
audiovisual data into a plurality of cells of correct 
audiovisual data; adding at least one erroneous cell 
containing erroneous audiovisual data to the plurality of 
• cells; and forming a sequence instruction representing a 

20 playback sequence for playing back selected ones . of the 
plurality of cells in a specified order. 

In another exemplary embodiment the present invention 
provides a method for use in reproducing an audiovisual 

25 product, comprising the steps of: receiving an audiovisual 
product having audiovisual data divided into a plurality 
of cells, including at least one correct cell containing 
correct audiovisual data proper to an original content 
sequence, and at least one erroneous cell containing 

30 erroneous audiovisual data, and at least one sequence 
instruction representing a playback sequence for playing 
back selected ones of the plurality of cells in a 
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specified order; and reproducing the audiovisual data in 
the cells according to the sequence instruction. 

Preferably, an erroneous red herring cell contains a 
5 short section of original audiovisual data and initially 
appears to be proper to the original content sequence, but 
the audiovisual data is distorted such as by playing the 
video data backwards. Hence, if the erroneous red herring 
cell is reproduced, then the original content sequence is 

10 not seen correctly. Other examples of erroneous cells 
include distracting visual or audio effects such as 
negative images, high contrast or low contrast images, 
snow, fading, jitter, and overly loud, soft or distorted 
audio, amongst many others. 

15 * 

Still another aspect of the present invention relates 
to the use of scrambled video streams within an 
audiovisual product . 

20 In one exemplary embodiment of the present invention 

there is provided a method for use in creating an 
audiovisual product,, comprising the steps of: receiving 
original audiovisual data intended for playback according, 
to an original content sequence; dividing the original 

25 audiovisual data into a plurality of cells; allocating the 
plurality of cells amongst at least a first video stream 
and a second video stream; and creating a video stream 
switch instruction to switch between the first and second 
video streams, thereby reproducing the cells according to 

30 the original content sequence. 

In another exemplary embodiment of the present 
invention there is provided a method for use in 
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reproducing an audiovisual product, comprising the steps 
of: receiving an audiovisual product having a 

plurality of cells of audiovisual data which together 
represent an original content sequence, wherein the cells 
5 are divided amongst at least first and second video 
streams; and performing one or more, video stream switch 
instructions to automatically switch between at least the 
first video stream and the second video stream during 
reproduction of the cells, thereby reproducing the 
10 audiovisual data according to the original content 
sequence . 

Original audiovisual data intended for playback 
according to an original content sequence is divided into 
15 a plurality of cells, and the cells are allocated amongst 
at least first and second video streams. A video stream 
. switch instruction is used to automatically switch between 
the first and " second video streams, thereby reproducing 
the cells according to the original content sequence, 

20 

Preferably, a video object holds each cell, and the 
video stream switch instruction defines a video stream to 
be reproduced from the video object as either the first 
video stream or the second video stream. Erroneous data is 

25 ideally recorded in the other streams. At least one 
preliminary video object has program instructions for 
performing the video switch instruction to select either 
the first video stream or the second video stream, 
respectively, and then a multi-angle video object holds 

30 the cell in a respective video stream. The preliminary 
video objects and the multi-angle video objects are 
suitably interleaved. That is, one or more preliminary 
video objects are reproduced in sequence, followed by one 
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or more multi-angle video objects, and then repeating this 
layout. The video stream switch instruction is preferably 
performed using forced activate button commands associated 
with hidden menu buttons. The button commands are suitably 
5 taken from a DVD-Video virtual command set in order to set 
a video stream special parameter (i.e. SPRM3) to a desired 
video stream- appropriate to the next multi-angle . video 
object. 

10 Preferably, a sequence generator is used to generate a 

sequence of video streams in order. The sequence generator 
is preferably a deterministic algorithm seeded by one or 
more initial parameters. In one preferred embodiment, one 
or more of the initial parameters are provided again at 

15 playback, as. a form .of key. 

The preferred embodiments of the present invention 
relate in particular to an audiovisual product playable 
according to a DVD-Video specification. Preferably, a 

20 sequence instruction is implemented as a program chain' 
(PGC) . It is desired to provide effective control of 
access to audiovisual data contained in a DVD-Video 
product, but also to maintain efficient use of available 
space on a recording medium such as an optical disc. The 

25 bulk of the data on a typical DVD-Video disc is taken up 
by audio-video presentation data, which is contained 
within cells and video objects (VOBs) . By contrast, the 
space taken up by navigation data, such as programs (PGs) 
and program chains (PGCs) is relatively small. 

30 

Each of the aspects of the present .invention as 
discussed herein can be employed alone. Preferably, any 
two or more of the aspects of the present invention are 
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employed in combination. Most preferably, the locking 
aspect, the obfuscation aspect and the content scrambling 
aspects disclosed herein are all employed in combination, 

5 In one particularly preferred embodiment of the 

present invention, an original content sequence is divided 
into cells, and the cells and/or the video streams are 
scrambled. Hence it is difficult for the original content 
sequence to be reconstructed simply by reading the 

10 audiovisual objects in the audiovisual product. Further, a 
correct sequence instruction is hidden amongst many 
similar but incorrect sequence instructions. Further 
still, access to the correct sequence instruction is 
controlled" by a destination function and an access code, 

15 As a result, a very high degree of . security is obtained 
for the " original audiovisual data stored in the 
audiovisual product.. 

The present invention also extends an audiovisual 
20 product formed by or adapted for use in any of the aspects 
of the present invention as defined herein. The 
audiovisual product is preferably a DVD-Video product and 
particularly an optical disc having audiovisual content 
recorded thereon according to a DVD-Video specification. 

25 

Conveniently, in at least some preferred embodiments, 
the present invention is implemented as a computer 
program, or a suite of computer programs. The program or 
programs are recorded on any suitable recording medium, 
30 including a removable storage medium such as a magnetic 
disk, hard disk or solid state memory card, or as a signal 
modulated onto a carrier for transmission on any suitable 
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data network, such as a local area network (LAN) or a wide 
area network (WAN) such as the internet. 

In at least -some preferred embodiments, the present 
5 invention is suitably performed on a computing platform, 
ideally a general purpose computing platform such as a 
personal computer, or a client-server computing network. 
Alternatively, the present is implemented, wholly or at 
least in part, by dedicated hardware. As one example, the 

10 present invention is performed in a home entertainment 
appliance such as an optical disk player or recorder. In 
at least some preferred embodiments , the present invention 
is performed in a DVD-Video player for playback of DVD- 
Video format optical discs and/or in a DVD-recorder for 

15 recording DVD-Video format data onto an optical disc. 

For a better understanding of the invention, and to 
show how embodiments of the same may be carried into 
effect, reference will now be made, by way of example, to 
the accompanying diagrammatic drawings in which: 

Figure 1 . is a schematic view of an apparatus for 
creating an audiovisual product, as . used in preferred 
embodiments of the present invention; 

Figure 2 is a schematic view of a playback apparatus 
for reproducing an audiovisual product as employed in 
preferred embodiments of the present invention; 

Figure 3 is a schematic representation of an optical 
disk recording medium and data recorded thereon, according 
to a preferred embodiment of the present invention; 
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Figure 4 is a schematic view of PGC permutations used 
in a preferred- embodiment of the present inventions- 
Figure 5 is a schematic flow diagram of a preferred 
5 method of creating an audiovisual product; 

Figure 6 is a schematic flow diagram of a preferred 
method of reproducing an audiovisual product; 

10 Figure 7 is a schematic view of an example original 

audiovisual clip; 

Figure 8 shows the identification of .scene cuts within 
the. audiovisual clip; 

15 

Figure 9 shows the audiovisual clip subdivided into 
sqenes; 

Figure 10 shows the audiovisual clip divided into 
20 cells; 

Figure 11 shows red herring cells inserted into the 
cells; 

25 Figure 12 shows the cells being jumbled; 

Figure 13 shows reallocation of references to the 
cells; 

30 Figure 14 shows an example correct playback sequence 

instruction; 
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Figure 15 shows a navigational Program of a correct 
playback sequence instruction; 

Figure 16 shows a navigational Program of an incorrect 
5 playback sequence instruction; 

Figure 17 shows a correct playback sequence 
instruction amongst many incorrect playback sequence 
instruction; 

10 

Figure 18 is a schematic overview of a preferred 
content scrambling method using video streams; 

Figure 19 is a schematic view of content data divided 
15 into cells and allocated to video streams; 

Figure 20 is a schematic view of. video objects 
employed in the preferred content scrambling method; 

20 Figure 21 is a table of an example sequence generator 

function; 

Figure 22 is an example of DVD virtual commands used 
to perform video stream switching; and 
25 * 

Figure 23 is another schematic view of content data 
divided into cells and allocated to video streams. 

The preferred embodiment of the present invention will 
30 be described with reference to the particular example of a 
DVD-Video format optical disk containing audiovisual 
content. However, it will be appreciated that the 
invention is applicable to a wide variety of other 
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environments, particularly where audiovisual content is 
stored in some form of random access storage media. Also, 
it is envisaged that the DVD-Video format will itself be 
superseded over time and replaced with new format 
5 definitions. That is, the present invention is likely to 
be applicable even in some future and as yet unrealised 
environments . 

Figure 1 shows an example authoring apparatus as may 
10 be employed in preferred embodiments of the present 
invention. In this embodiment, the authoring apparatus 
includes a computing platform such as a client-server 
computer system, or a stand-alone personal computer 30. 
Optionally, raw audio and video data are received, such as 
15 through a camera 10 and a microphone 20, or are provided 
from other sources such as a file storage device 25, or 
are created within the authoring apparatus such as by 
image and sound creation software. The raw content data 
may include video clips, audio clips, still picture 
20 images, icons button images and other visual content to 
be presented onscreen. The content is suitably in the form 
of MPEG or JPEG encoded files, but may take any suitable 
format . 

25 This original audiovisual data can take any form such 

as a movie, or a company presentation, or a quiz game, 
amongst many other possibilities. The personal computer 
30 acting as the authoring apparatus creates the desired 
audiovisual product as will be discussed in more detail 

30 below. The authoring apparatus 30 writes the audiovisual 
product 400 onto a storage medium such as a hard disk 
drive within the personal computer 30 or onto an optical 
disk 40. 
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Figure 2 is a general overview of an apparatus for 
reproducing the audiovisual product 400, as may be 
employed in preferred embodiments of the present 
5 invention.' The audiovisual product 400 on the optical 
disk 40 is received into a playback apparatus, in this 
case including, a DVD player 50 and television screen 60. 
User controls - are provided such as through a remote 
control handset 70. As will be explained in more detail 

10 below, in one example embodiment, the audiovisual product 
4 00 is controlled according to user input of an access 
code or PIN-code 80. As shown in Figure 2, the access 
code 80 is presented on the television screen 60 in 
response to user inputs through the remote control 

15 apparatus 70. 

Figure 3 shows a structure of the audiovisual product 
400 in more detail. The audiovisual product 400 includes 
a plurality of cells 420, in this case represented by 

20 cells AVI, AV2...AVm. Each cell 420 contains a short 
section of audiovisual data. The cells are played in 
- sequence, typically one after the other, in order to 
deliver the intended audiovisual representation, under 
control of a playback sequence instruction 410. The 

25 sequence instructions 410 as shown in Figure 3 are 
separate from the cells 420. Suitably, the cells 420 and 
the sequence instructions 410 are each allocated to 
structure locations within the audiovisual product, so as 
to enable navigation between instructions 410 and from 

30 instructions 410 to cells 420. 

In the preferred example of DVD-Video format data, the 
cells 420 are played in sequence through their inclusion 
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by reference in programs (PGs) which are in turn organised 
into Program Chains (PGCs) . In Figure 3, the sequence 
instructions 410 are. represented by Program Chains PGC1, 
PGC2...PGCn. Preferably, each cell 420 contains at least 
5 one video stream, at least one audio stream, and/or at 
least one sub-picture stream. 

The DVD-Video format permits a "many to one mapping 
from PGCs to cells, which is primarily designed in the 

10 specification in order to support multiple storylines. An 
example of this is a DVD-Video disc that contains two 
.separately rated versions of the same movie corresponding 
to a PG version and a G (General Audience) version, with 
the latter having certain scenes removed. When a viewer 

15 plays the disc,, he or she can select at the outset whether 
to play the PG or G version, and a 'parental control' 
feature of DVD is available for exactly this purpose. 
Typically, most of the movie content is common to both the 
PG and G versions and recorded only once on the disc. 

20 However, the PGC for the PG version omits selected scenes 
which are included only in the PGC for the G version, or 
vice versa. 

Since the bulk of the data on a typical DVD-Video disc 
25 is taken up by audio-video presentation data contained 
within the cells 420, and the space taken up by 
presentation data including PGCs 410 is relatively small. 
The present invention implements multiple variations on 
the way in which those cells 420 are played, but without 
30 duplicating the audio-video data. 

Obfuscation of Sequence Instructions 
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In a first aspect, the present invention provides an 
audiovisual product where a correct playback sequence 
instruction is obscured amongst many incorrect sequence 
instructions . 

5 

The preferred embodiment of the present invention 
provides obfuscation by using multiple PGCs 410 to 
reference the underlying cells 420 in multiple different 
sequences, but where only one such sequence is correct. 

10 

For example, for three cells A, B and C, six PGCs 1-6 
may be defined as shown in Figure 4. In this case there 
are six possible playback sequences of the content, of 
which only PGC 1 provides a correct playback sequence. 

15 Hence, PGC 1 is a correct sequence instruction 410a, 
whilst the other PGCs 2-6 are all incorrect sequence 
instructions 410b. This approach can be taken to hide the 
correct video sequence. For this purpose, the duration of 
the cells 420 should be quite short (a cell can contain as 

20 little as 0.4 seconds of audio/video) and the video 
programme should be divided into a large number of cells 
420. In the DVD-Video specification,, a PGC can contain up 
to 256 cells, and. a Video Title Set (VTS) , which is the 
enclosing structure for PGCs, may contain up to 327 67 

25 PGCs. Thus, a cell may be shared by at most 32767 PGCs. 
In the example above it is assumed that the correct 
sequence, A, B, C, consists of sequential cells 420 played 
back in order. 

30 Figure 5 is an overview of a preferred method for 

creating an audiovisual product. Raw audiovisual data is 
received at step 510. At step 520, the audiovisual- data 
is divided into cells 420 as outlined above with reference 
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to Figure 4 and as discussed in more detail below. The 
step 520 may include the step 521 of adding erroneous 
cells into the original audiovisual data. The step 520 
also optionally includes the step 522 of scrambling 
5 (rearranging or jumbling) the cells 420 so that they do 
not correspond to the original intended playback sequence. 

Step 530 comprises creating a plurality of . sequence 
instructions 410 which control a playback sequence of the 

10 cells -420 created in step 520. The step 530 includes the 
step 531 of. creating one or more correct, sequence 
instructions 410a, amongst other incorrect sequence 
instructions 410b. Step 532 optionally comprises permuting 
the correct sequence instruction 410a to create a larger 

15 number of incorrect- sequence instructions 410b, so that 
the one or more correct sequence instruction 410a is 
hidden amongst the many incorrect sequence ' instructions 
410b derived therefrom. 

20 Having created the cells 420 of audiovisual data and 

the corresponding plurality of sequence instructions 410 
in steps 520 and 530 f the audiovisual product is then 
formatted and recorded onto a suitable storage medium in 
step 540. In the preferred embodiment the audiovisual 

25 product is formatted according to the DVD video 
specification and recorded onto a hard disk drive or 
preferably an optical disk. This step 540 may, if 
necessary, include downstream processing steps such as 
specific allocation of structure locations to the cells 

30 410 and the sequence instructions 420, and creating an 
explicit disk image (i.e. a bitstream image) ready to be 
recorded or burnt onto an optical disk. 
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Figure 6 is a schematic overview of a preferred method 
for reproducing the audiovisual product 400. 

Step 610 comprises receiving the created audiovisual 
5 product with the cells 420 of audiovisual data and the 
plurality of playback sequence instructions 410. 

Step 620 comprises selecting one of the playback 
sequence instructions 410. Step 620 preferably includes 

10 the step of performing "an authentication process to 
confirm that the user has permission to reproduce the 
audiovisual product. In one embodiment, authentication 
includes a step 621 of receiving a user input such as a 
user access code or PIN, calculating a structure location 

15 within the" audiovisual product in step 622, and then 
jumping to the calculated location in step 623. Such 
calculation in step 622 suitably realises a structure 
location corresponding to one amongst the plurality of 
playback sequence instructions. If the calculation of 

20 step 622 has been- performed correctly, then a correct 
playback ' sequence instruction 410a will be located. 
Otherwise, one of the many incorrect playback sequence 
instructions 410b will be selected. 

25 Step 630 comprises playing the audiovisual data in the 

cells 420 according to the selected playback sequence 
instruction 410. Step 630 suitably includes retrieving 
the audiovisual data in the referenced cells 420 from a 
storage medium such as an optical disk, performing 

30 appropriate decoding, and rendering the decoded data for 
output such as through a display screen and through audio 
speakers, as outlined above with reference to Figure 2. 
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PGC Obfuscation 

A particularly preferred embodiment of the present 
invention will now be described by way of further 
5 illustration, with reference to Figures 7 to 17 of the 
drawings . 

Figure 7 shows an example audio-video film clip 700, 
Assume that the source video content that is required to 
10 be protected consists of a 60 second clip within which 
there are three *cuts' such that the clip contains four 
distinct scenes. Note that the scene cut points are 
typically implicit within the . clip, rather than being, 
presented as four separate sub-clips. 

15 

It is desired that the sequence will be divided into 
cells 420 with an average duration of 3 seconds each, 
resulting in a total of 20 cells to represent the 
sequence. 

20 

The supplied video clip is searched for scene cuts. 
There are well-known methods used for this purpose based 
on discontinuities in the video and/or audio stream. See, 
for example,. G. Akrivas, N. Doulamis, A. Doulamis and S. 
25 Kollias, "Scene Detection Methods for MPEG-encoded Video 
Signals", Proceedings of MELECON 2000 Mediterranean 
Electrotechnical Conference, Nicosia, Cyprus, May 2000, 
amongst many other. The scene cuts become anchor points 
for the subsequent subdivision, as shown in Figure 8. 

30 

As shown in Figure 9, in this example the clip is 
divided into cells 420 of approximately 3 seconds each, 
with cells 420 anchored to the cut scene points. The 
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duration of the cells 420 is altered slightly so that the 
resulting cells are not of a uniform duration. 

Erroneous "red herring" cells 

5 

Referring to Figure 10, it is advantageous to 
incorporate erroneous *red herring' cells 421 that are not 
referenced in the correct playback sequence 410a. (A ^red 
herring' is literally a distraction to divert attention, 

10 and derives from the use of fish to distract hunting dogs 
from a scent trail). Such erroneous cells 421 are suitably 
designed so that they appear very similar to correct cells 
420, such .that it is not possible to easily exclude all 
sequence instructions 410 that contain clearly incongruous 

15 cells 421. For example, suppose that the product includes 
a series of cells 420 of four seconds duration each, aa 
follows: 

Cell 1 - start 0 sees end 4 sees 
20 Cell. 2 - start 4 sees end 8 sees 

Cell 3 - start 8 sees end 12 sees 

In, this case, some example erroneous cells are: 

25 Red herring 1 - start 2 sees end 6 sees 

Red herring 2 - start 6 sees end 10 sees 

In practice, the duration of each cell is varied so as 
not to create a pattern _ from which, for example, 
30 interrogation of time codes, could be used to discard 
obviously erroneous cells. 
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As shown in Figure 10, a number of erroneous *red 
herring' cells 421 are created, which have a similar 
length to the other cells 420. The level of protection 
will increase with the number of erroneous red herring 
5 cells 421, and will typically be constrained by the space 
available on the disc. In this example, 20% erroneous red 
herring cells are assumed. These erroneous red herring 
cells 421 ideally start and finish at points that are not 
shared by other valid cells, or at the point of scene 
10 cuts. The erroneous cells 421 are illustrated as shaded 
boxes in Figure 10. 

The erroneous red herring cells 421 are inserted into 
the play order of the valid cells 420, sorted by start 
15 time of the cell, as shown in Figure 11. 

Cell scrambling 

As shown in Figure 12, the cells 420 (including any 
20 erroneous cells 421) are jumbled by changing the location 
of each cell relative to others, and so determine the 
order in which the cells 420 will be presented on the 
disc. Although the cells 420 may be jumbled arbitrarily, 
it will provide a higher level of protection if each 
25 possible playback sequence meets the constraints detailed 
in the DVD-Video specification that relate to seamless 
play. That is, for two cells 420 to play back seamlessly 
- without a jump during playback - then their associated 
data must be relatively close on the disc. In practice 
30 cells 420 may be many sectors apart and still play back 
seamlessly, so in this example the cells 420 may be 
sequenced arbitrarily, but for illustrative purposes we 
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assume that any cell must be within three cells 420 of its 
correct position. 

In the preferred DVD-Video format, the cells 420 are 
5 numbered from 1 in the order they appear on the disc. 
Hence, the jumbled cells 420 are renamed sequentially in 
the order they will appear on the disc as shown in Figure 
13, using an underscore to denote renamed cell 
identifiers . 
10 - . 

Under the illustrated arrangement, the correct 
playback sequence is shown in Figure 14. 

Note that the cells £, 8_, 15 and 19^ are erroneous red 
15 herrings and do not occur in the correct playback 
sequence. 

Based on the list of cells 420 as provided on the 
disc, l r 2, ... 2A, a number of incorrect playback sequences 

20 410b are created, each one determined by selecting any 20 
from the 24 cells and presenting these in a random order. 
Again, the level of protection will increase if every such 
sequence meets the DVD-Video specification's requirements 
for seamless playback. If the sequence is broken into N 

25 cells 420 with the addition of R red herring cells 421, 
then the number of possible sequences (ignoring the 
seamless playback constraints) is: (N+R)!/R! In the 
current example, this equates to 24 1/4! This number is 
very large (2. 6 x 10 22 ) and in practice the number of 

30 possible sequences presented on the disc is constrained by 
DVD-Video limits on the number of Program Chains (PGCs) . 
Since the audio/video data is shared between PGCs, there 
is a practical limit of 32,767 playback sequences. Each 
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playback sequence stores the playback cells 420 by 
reference, so each of these sequences can be represented 
on the DVD disc using very little data. 

5 Each of the playback sequences 410 (i.e. the correct 

sequence 410a together with multiple incorrect sequences 
410b) is represented using the Program (PG) DVD-Video 
navigation structure. This consists of a list of cell 
pointers . Programs are contained within Program Chain 
10 structures. The Program corresponding to the correct 
sequence 410a in this worked example would be structured 
as shown in Figure 15 ^ 

An example of one incorrect sequence 410b, which 
15 consists of the playback sequence 1, 2_, 2_0, is 

illustrated by Figure 16. 

A Program Chain is created for each of the playback 
sequences within a single Video Title Set (VTS) . Assume 

20 that there .are 1,000 sequences in total created for the 
disc, of which one is the correct sequence and 999 are 
incorrect sequences. 'One of the sequence instructions 
410a is chosen to be the destination to unlock the video, 
in this example, PGC number 321, which contains the 

25 Program with the correctly ordered sequence of cells 420, 
as shown in Figure 17. . 

The audiovisual product is then ready to be recorded 
onto a suitable storage medium, in this case an optical 
30 disk. However, further intermediate authoring steps may 
be performed in order to convert the authored audiovisual 
product into a specific version, i.e. into a disk image 
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ready for burning onto a blank previously unrecorded 
optical disk. 

In order to extract the correct sequence of" cells 420, 
5 a reverse engineer would need to examine every possible 
combination. Assuming that the maximum possible number of 
cells 420 has been encoded, then to reconstruct a one hour 
program would require a reverse engineer to view up to 
32,767 hours (3.74 years) of content. 

10 

It is preferred when preparing the sections of video 
to ensure that there are no obvious clues to the correct 
sequence of cells 420. For example, any timecodes in the 
MPEG elementary streams should be removed so that this 

15 information cannot be used to sort a series of cells 420 
into the required order. Also, cells 420 should be 
divided on "scene boundaries so that a reverse engineer 
cannot simply compare the last frame in one cell with the 
first frame in another to guess the correct playback 

20 sequence. 

To overcome the restriction of the number of PGCs per 
VTS, the method outlined above can be extended to employ 
multiple VTSs and therefore increase the number of 

25 destinations that must be interrogated in order to find 
the correct playback sequence. In this case, - the video 
program would be divided into v sections of similar 
duration, with section 1 mapping to VTS 1 up to section v 
mapping to VTS v. Within each VTS up to 327 67 PGCs can be 

30 used to obfuscate the program; the correct PGC in each VTS 
is unrelated and is arrived at through independent 
calculation. 
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Playback of the audiovisual product involves 
determining the correct playback sequence instruction 
amongst the many incorrect playback sequence instructions 
410. In the above example shown in Figure 17, this means 
5 determining PGC 321 as the correct playback sequence 
instruction 410a in order to achieve satisfactory playback 
of the audiovisual content , i.e. according to the cell 
sequence shown in Figure 14 by reproducing cell 3, 
followed by cell 1, followed by cell 2 and so on. As will 

10 be appreciated by the skilled reader, various options are 
available to determine whether a user is authorised to 
access the audiovisual content. For example, a physical 
token such as a smart card is. presented to a card reader, 
or some form of biometric authentication (e.g. 

15 fingerprinting) is performed. The playback apparatus is 
then instructed to operate " according to the correct 
playback sequence instruction, suitably by jumping to a 
structure location associated with the correct playback 
' sequence instruction. 

20 

Video stream scrambling 

A further aspect of the present invention relates to 
scrambling of video objects within an audiovisual product, 
25 so that unauthorised access or copying of the audiovisual 
product is made more difficult. 

The. preferred embodiment relates to an audiovisual 
product which is playable according to the DVD-Video 
30 specification, and will be described in detail below. 

The DVD-Video specification provides a structure known 
as a Video Object (VOB) to hold streams of audiovisual 
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data. VOBs are internally divided into Cells, as also 
generally discussed above with reference to Figure 4. An 
audiovisual program is presented by playing a series of 
the VOBs in a pre-defined sequence, using Programs and 
5 Program Chains (PGCs) . In the current DVD-Video 

specification, VOBs contain from one to nine video streams 
(often referred to as "multi-angle" streams), from zero to 
eight multi-channel audio streams, and from zero to 32 
sub-picture streams. 

10 

Consecutive VOBs can be ordered to contain different 
numbers of streams. For example, a first VOB may contain 
a single video stream, while a second VOB may contain four 
video streams . A VOB' that contains multiple video streams 

15 is often referred to' as a "multi-angle block". A Special 
Parameter (SPRM) - number 3 (SPRM3) .-is used to stipulate 
which video stream to play. If the audiovisual product is 
recorded with this special parameter SPRM3 set to the 
value "4", then future multi-angle streams will result in 

20 angle 4 being selected for playback. This feature is 
designed to enable a viewer to choose between up to nine 
different camera angles and then to view the recorded 
video stream for the chosen camera angle. However, the 
present invention employs this camera angle video stream 

25 feature to provide improved protection against copying or 
unauthorised access of the audiovisual product. 

Figure 18 is an overview of a preferred method for 
scrambling content in an audiovisual product, using video 
30 streams.. Original audiovisual data is received at step 
1810, such as MPEG encoded audio and/or video data. The 
original audiovisual data 401 is divided into cells 420 in 
step 1820. The cells 420 are distributed amongst a 
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plurality of video streams, in step 1830. That is, instead 
of the cells all remaining within a single video stream, 
the cells are instead distributed within at least two 
different video streams. Also, at least one video stream 
5 switch instruction is created, in order to automatically 
switch from a first video stream to a second video stream 
during playback of the audiovisual product. Step 1830 
comprises creating sequence instructions 410 which control 
a playback sequence of the cells 420. The audiovisual 
10 product is then formatted and recorded onto a suitable 
storage medium in step 1840. 

The method will now be explained in more detail, with 
reference to Figures 19 to 23. 

15 

As., shown in Figure 19, original audiovisual " data 401 
having an intended playback sequence (e.g. a generally 
linear storyline) is divided into a plurality of cells 
420, similar to the discussion above with reference to 

20 Figures 7,-8 and 9. In this example there are four^cells, 
labelled A, B, C and 'D. The cells are divided amongst 
different video streams. That is, some of the cells (A, B, 
& D) are allocated to a first video stream 1901, whilst at 
least one cell (C) is allocated to a different second 

25 video stream 1902. In order to play back the cells 402 in 
the desired sequence (ABCD) , a video stream switch is 
required between the first stream 1901 and the second 
stream 1902. Simply continuing with the first stream 1901 
does not result in the desired playback sequence. In this 

30 example, simply continuing with the first video stream 
1901 would omit reproduction of cell C. The video stream 
switch to include cell C is represented by a bold arrow in 
Figure 19. 



WO 2004/109678 



33 



PCT/CB2004/002388 



Figure 20 shows the use of video streams within video 
objects (VOBs) in more detail. Conveniently, the cells 420 
are contained within video objects (VOBs) . Some of the 
5 cells (A,B,D) are held within simple VOBs 2010 having only 
one video stream. However , at least one video object 2020 
is defined having a plurality of video streams 1901, 1902. 
The second video stream 1902 is provided by forming such a 
multi-stream video object (multi-angle block) . The cell C 
10 is held in the second video stream 1902 within the multi- 
angle block 1920. 

In Figure 20, the cell C is provided in both video 
streams 1901 and 1902 as cell CI and cell C2 . This makes 

15 copying more difficult, since both streams 1901 and 1902 
contain apparently valid data. The cell C2 is preferably 
an erroneous "red herring" cell containing distorted or 
otherwise unsatisfactory video data. Reproducing cell C2 
(i.e. continuing with the first video stream 1901) does 

20 not provide satisfactory reproduction of the original 
audiovisual data 401. Up to nine alternative video streams 
may be provided within each multi-angle block, including 
the correct cell CI. 

25 A sequence instruction (PGC) is created to play back 

the VOBs 1910, 1920 in order, thereby reproducing the 
cells 420 ABCD. The playback sequence is further 
controlled by video stream switch instructions 2011, 2021 
to switch between video streams 1901, 1902 at appropriate 

30 points in the sequence. The correct video stream 1901, 
1902 is calculated for each multi-angle block 2020, using 
a deterministic algorithm. When the same deterministic 
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algorithm is employed during reproduction, playback then 
follows the same path amongst the recorded video streams. 

In the preferred embodiment, . the video stream switch 
5 instructions 2011, 2021 are performed using forced 
activate button commands associated with hidden menu 
buttons in a video object 2010 which precedes one of the 
multi-angle blocks 2020. In this example, the VOB for cell 
B includes a switch command 2011 to set the SPRM3 special 
10 parameter to "2". Upon entering the following VOB for cell 
C as a. multi-angle block, the set value of the special 
parameter SPRM3 determines that stream "2" is -to be 
. reproduced, in this case leading to cell CI. Also, in this 
example, the VOB 2020 for cell C likewise sets SPRM3 to- a 
15 value of n l" ready for a following cell. 

The preferred embodiment uses a sequence generator to 
determine the correct video stream playback sequence. One 
appropriate sequence generator is based on a deterministic 

20 algorithm that is seeded by one or more initial 
parameters, and from which successive values are produced 
by applying the generator to the set of parameters. An 
example of such a sequence generator is a Linear 
Congruential Generator (LCG) , defined as a method whereby 

25 the next number is generated from the current one by 
rn+1 = (A * r n + B) mod M, where A and B are prime 
numbers . 

Figure 21 is a table as an example of a short .sequence 
30 provided by the values A=7, B=3, M=17 . If each multi- 
angle block contains (say) four video streams, then the 
value r n modulo 4 + 1 (which returns values in the range 1 
to 4) is used as the basis of selecting successive angles. 
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Thus, in the first multi-angle block 2020, angle stream 1 
will play, followed by angle 4 in the second block, and so 
on . 

5 The original audiovisual data will only play back 

correctly if the original cell is played for each of the 
multi-angle blocks, for which it is necessary to know the 
values of the parameters to the sequence generator (A, B 
and M in this example) . Since there are many possible 

10 values for these parameters, one or more of the parameters 
can be used as a A key' to unlock the content. If incorrect 
parameters are chosen for playback, then incorrect video 
sequences will play during the multi-angle blocks, which 
will render the content unplayable (i.e. highly 

15 unsatisfactory) . 

That is, the method includes creating a deterministic 
algorithm having an iterative sequence of outputs 
dependent upon initial parameters, and determining the 

20 video angle streams according to the sequence. Also, the 
method includes receiving one or more parameters during 
playback of the .audiovisual product, applying a 
deterministic algorithm to the parameters to produce a 
sequence of outputs, and selecting between video streams 

25 according to the produced sequence. 

Figure 22 shows example DVD-Video navigation 
instructions to perform the iterations of the LCG 
algorithm described. Under current implementations of the 
30 DVD-Video specification, only a single command can be 
associated with a menu button. Therefore to perform the 
necessary sequence of instructions in each iteration of 
the sequence generator, it is preferred to employ forced 
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activate buttons in a number of successive cells, prior to 
encountering a multi-angle block. That is, the program is 
in practice executed using instructions performed at- the 
end of each of several preliminary VOBs in sequence, 
5 interleaved between each multi-angle block. Following this 
sequence, the Special Parameter SPRM3, which records the 
number of ..the video angle for playback, is set to the 
appropriate value. 

10 Figure 23 is a simplified example * to illustrate the 

principle features of the preferred scrambling method. The 
cells CI and C2 are completely erroneous and have been 
added to the original content sequence as ->'red herring" 
cells, as in the embodiment described above with reference 

15 to Figure 10. Similarly, the cells Bl, B2, B4, D2, D3 and 
D4 are all erroneous cells. The original audiovisual data 
is only reproduced by following the path shown in bold, 
which connects cells A, B3 and Dl. This path requires the 
correct sequence instruction (PGC) to select these VOBs in 

20 order, and' further requires the correct video stream 
switch instructions to select the appropriate stream 
within each multi-angle VOB. This synergistic combination 
leads to an audiovisual product having very strong 
defences against unauthorised access such as copying or 

25 viewing. 

Locking/Unlocking 

Another aspect of the present invention relates to 
30 "locking" of the audiovisual product, which then requires, 
"unlocking" before a user is allowed access to the 
audiovisual product. 
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In a preferred embodiment of the present invention, 
the user provides an access code through an input device 
such as a keyboard or handheld remote control unit. 
Conveniently, the audiovisual product is provided with a 
5 start up sequence (e.g. first-play PGC) which prompts the 
user for input of the access code. The access code then 
leads, either directly or indirectly, to the correct 
program sequence instruction of PGC 321. 

10 This further embodiment of the present invention has 

been developed to allow vendors to publish video content 
on DVD-Video discs for playback on any DVD-Video player, 
where the content . must be "unlocked' prior to viewing. 
This enables, amongst other things, pay-to-play 

15 applications, as illustrated by the following scenario: 

1. An end user receives a DVD-Video disc, containing 
valuable content, such as a cover-mount on a 
magazine. 

20 2. When the user plays the disc, he/she is prompted 

to enter an "unlock code' before . the content or 
part of the content can be played. 

3 . To obtain the unlock code requires ' the user to 
call a premium-rate number or perform a credit 

25 card transaction, for example. 

4 . When the unlock code is entered on screen as the 
disc is playing, protected content becomes 
playable . 



30 A number of variants are possible, according to the 

level of security and functionality that is required, as 
outlined below. 
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Example 1 : 

In a first example method, a single, fixed unlock code 
is used to unlock the disc content. This could be, for 
5 example, a four digit PIN. On screen, the user may be 
presented with an image of a numeric keypad and using the 
remote control navigation buttons (e.g. Up, Down, Left, 
Right and Enter) can key in the four digits. Preferably, 
as each digit is entered it is displayed on screen for 
10 confirmation to the user. Of course, many other input 

options are also applicable. 

Example 2: 

15 ~ A characteristic of the first example method is that 
every user receives the same unlock code, and therefore a 
security weakness is that the unlock code could be given 
by one person to many others who would thereby subvert the 
access control. Using a pair of codes can enhance 

20 security as follows: 



25 



1. 



When prompting for the unlock code the disc 
displays an 'identification code' which could be, 
for example, a four-digit code chosen at random by 
the player at run time. 



2. 



When the user purchases the unlock code he/she 
must first quote the identification code; for each 
possible identification code there is a 
corresponding unlock code. 



30 



3. 



The user enters the unlock code to access the disc 



content . 
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Many algorithms are available for generating matching 
pairs of security codes, such as public/private key pairs. 

A characteristic of the second example method is that 
5 a new identification code will be generated for each 
session of playing the DVD disc and unlock codes are 
- unique to each identification code. This means that if 
the user purchases an unlock code it can only be used to 
unlock the content once (pay once, play once). This may 
.10 be desirable " for some applications (for* example, 
competition entry, when a user should pay again each time 
he/she wishes to enter the competition) , but may be 
undesirable in others. For some applications it is 
desirable to allow pay once, play many functionality. 

15 

Example 3 : 

The second example method can be modified to allow the 
identification code to be entered by the user using 
20 information that is either unique to that user or 
restricted to a small number of users'. Examples are: 

1. A ^customer number' allocated to the user which 
can be traced (suitable for corporate use, for 

25 example) . 

2. A credit card number of the customer (which the 
customer is unlikely to circulate to others) . 

Dependent upon the level of security required, these 
30 various options for receiving an access code or unlock 
code can be employed alone, or in any combination. The 
access control and content security provided by the 
present invention allows audiovisual products to be 
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defined and produced in many exciting and commercially 
valuable forms which are at present not possible. Some 
examples are given in the following table: 



Application 


Example 


Security Required 


Drip Feed - A disc is delivered to 
users and content is unlocked at 
certain time intervals. 


A newspaper publisher 
provides a disc with the paper 
on Monday containing a 
number of episodes. An access 
code is published each day of 
the week that unlocks a new 
episode to be viewed. 


Security level is relatively low - 
it is not critical if a reader 
should discover early how to 
view episodes that are not yet 
on general release. 


Reward - Content is unlocked if 
the user performs certain tasks. 


A disc contains some kind of 
puzzle. When the puzzle is 
completed successfully, the 
reward is a video sequence. 


Low. 


Pay to Play - Content is unlocked 
when the user performs a 
transaction (perhaps pays a fee). 


A disc contains a bonus 
episode. The user makes a 
credit card payment to obtain a 
code to access the content. 


Medium. Unauthorised access 
would lead to loss of revenues, 
but the publisher would not be 
exposed to further costs. 


Skill with Prize - A prize is 
awarded following the user 
performing certain tasks. 


The disc contains a 
competition, such as a quiz, and 
based oh the user's response a 
prize may be claimed by the 
user. 


Medium/High. Payment of 
prize exposes the publisher to 
additional cost and risk. . 



5 



[Table 1] 

During playback, the content on the DVD-Video disc 
will cause the player to undergo authentication and will 
10 either play valid video if authentication succeeded or 
some other video if it failed. 
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Example 4 : 

To support the preferred embodiments of the present 
invention, certain steps are taken during the preparation 
5 of content for the disc (ie. authoring) , and particular 
steps are taken during playback to unlock the content for 
authorised users. 

During authoring, the disc content is prepared as 
10 follows: 

1. Define a function D used to determine the 
destination on disc to play that meets the- 
following requirements: 
15 a. D is parameterised by n values Ci, C 2 ... C n where 

each of these values corresponds to a separate 
access code component that together will be 
used for unlocking the content. 

b. The result of D when evaluated for all 
20 possible values should lie in the range 1 to 

m. Larger values of m will usually result in 
higher levels of protection of the content. 

c. The range of each code Ci is such that, in 
combination Ci, C 2/ „ C n , there are a very large 

25 number of possible input values to D. 

d. There is a certain combination of values of 
<V, C 2 \ ... C n ' (the ^unlock code') that ideally 
results in a unique output from D, Duniock = 
D(Ci r , C 2 r , „<V). If D un iock is not unique for 

30 all values Ci, C 2/ _ C n , {ie. there are multiple 

unlock codes), then ideally there should be as 
small a number of possible such combinations 
of values that result in Duniock. 
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2. Create m destinations for program execution with 
the following properties: 

e. Destination D un iock corresponds to the 
unencumbered playback of the protected 

5 content. 

f. All other destinations result in playback of 
alternative or spurious content. 

During playback of the disc the following steps are 
performed: 

1. Obtain access codes Ci, C 2/ „, C n . 

2. Determine destination D(Ci, C 2 , ... C n ) . 

3. Jump to destination. - 

15 The codes C\, C 2 , ... C n can be drawn from any; of the examples 
given above, including any combination of the following: 

1. A PIN number supplied to the user. This could 
take the form of a simple four-digit code, for 

20 example. A user interface provided on the DVD- 

Video disc provides prompts by which the user 
enters each of the four digits in turn. This may 
be provided by a visualisation of a numeric keypad 
with which the user must use the standard DVD- 

25 Video remote control buttons (up, down, left, 

right, OK) to select the sequence of digits. 

2. A number that is specific to the current 
execution, which can be derived from the DVD-Video 
random number generator. 

30 3. A number that is private to the user, such as a 

credit card number, or a customer code. This 
number would be entered in a similar way to item 1 
above . 
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Example 5: 

Various • approaches are possible for definition of the 
5 destination function D. For example, a crude function 
would simply return a success/fail outcome based upon, 
say, a PIN number. The following pseudo-code returns 1 if 
the user enters the valid PIN code "1234" and 2 for all 
other codes. 
10 , 

Function D(C) 
{ 

if C =1234 then return 1 else return 2 

} 

15 

On the disc two destinations (1 and 2) would be set 
up, with 1 corresponding to the unlocked content proper, 
and 2 corresponding to some alternative content, such as a 
still image with the text "Access Denied". This approach 

20 would provide a very low level of protection - it would be 
trivial for a reverse engineer to identify both the 
correct unlock code and also the destination on disc for 
the protected content. The advantage of the approach is 
that it is very simple to implement, requiring simple 

25 authoring and playback methods. Therefore, this approach 
is adequate when security of the content is not an 
important requirement. 

Example 6: 

30 

A slightly more secure approach is to use a one-way 

Hash function, which is a function H that maps a message M 
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(usually of arbitrary length) to a fixed length 'message 
digest 7 where: 

1. H(M) is easy to compute, 
5 2. given any message digest MD it is hard to find a 

corresponding message M where MD = H(M); that is H 

is not practically invertible, and 
3. given M and H(M) it is hard to find a message M r * 

M such that H(M') = H(M) . 

10 

Thus, a- one-way hash function is a deterministic 
algorithm that compresses an arbitrary long message into a 
value of specified length - often ref erred, to as a 
'fingerprint' - such that it is infeasible to find two 
15 distinct messages that have the same fingerprint. Such' 
functions are widely used in cryptography; popular methods 
include MD5, SHA and Snefru,. . 

The significance of the one-way hash function is that, 
20 although a reverse engineer may be able to determine the 
required result of evaluating the function, there is no 
easy way to determine the input value that will give rise 
to that result. 

25 A simple destination function D based upon a Hash 

function H is: 

Function D(C) 
{ 

30 if H(C) - MD then return 1 else return 2 

} 
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where MD is a pre-determined, constant Message Digest 
value defined as the result of evaluating H(C) for the 
correct unlock code. Since H is not invertible, it will 
not be easy for a reverse engineer to determine the value 
5 of C that will cause the destination function to jump to 
the locked content. However, it would still be relatively 
easy for a reverse engineer to substitute or eliminate the 
hash function above since the desired destination (namely, 
y l' ) is easy to determine from the code. 

10 . 

Example 7 : 

A more secure, destination function would rely on 
having a relatively large number of apparently valid 

15 destinations available. For example, suppose a function 
D(C) takes as input a four-digit PIN code. A disc may be 
authored on which there are 10,000 possible destinations, 
of which 9,999 give "Access Denied" responses, and 1 
results in the protected content. This can " be 

20 accomplished - by the following trivial destination 
function: 

Function D (C) 
{ 

25 return C 

} 

Thus, security here is related to" how easy it may be 
for a reverse engineer to identify the protected content 
30 amongst a large collection. 

A security weakness then becomes the technique used to 
determine the code used to unlock the correct destination. 
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In considering the pay-once, play-once scenario,, it is 
important to ensure that a reverse engineer cannot easily 
purchase unlock codes and use these to allow play-many 
usages, thereby permitting the protected content to. be 
5 extracted and transferred to a disc that does not require 
authentication. 

Example 8 : 

10 Another example technique involves using a pair of 

keys as parameters to the destination function, with one 
,key being generated by the player, and the second matching 
key being supplied' by the vendor to unlock the content. 
One implementation of this approach may operate as 

15 follows: 

1. The user plays the disc, which generates a . random 
access code Ci in the form, say, of a four digit 
PIN. The code is displayed on screen. 
20 2. The user contacts the vendor and supplies the value 
of Ci. 

3. The vendor supplies a matching code C 2 , also, say, a 
four digit PIN. 

4. The user enters C 2 into the DVD-Video player which 
25 internally causes a destination to be evaluated as 

D(Ci, C 2 ) . 

5. The DVD jumps to the calculated destination. 



30 



Here, an example destination function is: 

Function D(Ci, C 2 ) 
{ 

return (Ci + C 2 ) mod 10000 
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} 



In this case, the vendor-supplied code calculated at 
step 3 above, would be evaluated as follows, assuming that 
5 the correct destination is Duniock: 

C 2 - (Duniock - Ci) mod 10000 (Note: 0 < C 2 < 10000) 

For example, if the correct destination is 1234 and 
10 the DVD player presents a code of 5678, then the 
corresponding code required to unlock the content is (1234 
- 5678) mod 10000 = 5556. 



15 



Example 9: 

Another example by which, the destination is unlocked 
is represented by the following pseudo code: 



Ref - RND(10,000) # Generate a random number 0... 9,999 

20 Display Ref 

Prompt for Key # 'Key' is a 4-digit unlock key entered by the user 

Destination =* (Ref XOR Key) mod 1000+1 # The target PGC in the range 1 ... 1000 
Jump to PGC Destination 

25 In the above , a random reference number is displayed. 

The user is required to contact the publisher of the disc 
to obtain a matching key. The publisher calculates this 
key as: 

30 Key = D XOR Ref 



where *D' is the correct destination - 321 in this 
example. The user enters this key and a destination is 
calculated and execution jumps to the corresponding PGC. 
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Note that PIN codes above are used for illustrative 
purposes; in practice longer codes may be appropriate to 
provide high levels of security. The destination function 
5 illustrated is very simple and insecure; in practice a 
one-way hash function would be preferable so that it 
cannot be easily inverted. 

The advantages of this method are: 

10 

1. The destination, code cannot easily be determined 
from examination of the instructions on the disc, 

2. each time the disc is played a different code will 
be generated requiring a distinct unlock code. 

A disadvantage is that a reverse engineer who is aware 
of a matching pair of codes that unlock the disc could 
create a copy of the disc, and replace the instructions 
that generate the random number with instructions that 
20 .always generate the known generated key- This new disc 
can then always be unlocked using the known unlock key 
from the matching pair. 

Example 10: 

25 

Another enhancement of the method is to apply a non- 
invertible transformation to the true originating code Ci 
in order to 'hide' this code. That is, the true 
originating code CI acts as a seed to generate the first 
30 access code CI' displayed to a user. In which case, a 
modified implementation would be: 
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1. The user plays the disc, which generates a random 
access code Ci in the form of, say, a four digit 
PIN. 

2. A (non-invertible) transformation T is applied to 
5 ' Ci to yield Ci f = T(Ci) and this transformed code 

is displayed on screen. 

3. The user contacts the vendor and supplies the 
value of Ci f . 

4. Using a large, pre-calculated lookup table 
10 containing all- possible codes and their 

corresponding transformed values, the vendor 
performs a table lookup to derive Ci from the 
supplied Ci' . 

5. Using the derived Ci value the vendor obtains and 
15 supplies a matching code C 2 , also, say, a four 

digit PIN. 

6. The user enters C 2 which internally causes a 
destination to be evaluated as D(Ci, C 2 ) . (Note: 
the value (V is no longer required) . 

20 7. The DVD jumps to the calculated destination. 

The advantage of this method over the previous 
examples is that the exposed values CI' and C2 are not 
sufficient to unlock the disc content, but require the 

25 pre-transformed value CI which cannot easily be derived 
from the exposed values. This is because, even though a 
reverse engineer could determine the method used by 
transformation T, this transformation is not invertible. 
The inverse transformation must be performed at the 

30 vendor's offices, where it is achieved through table 
lookup. Typically this table will be very large, and 
hence offers high security. 
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Although a few preferred embodiments have been shown 
and described, it will be appreciated by those skilled in 
the art that various changes and modifications might be 
made without departing from the scope of the invention, as 
5 defined in the appended claims. 

Attention is directed to all papers and documents 
which are filed concurrently with or previous to this 
specification in connection with this application and 
.10 which are open to public inspection with this 
specification, and the . contents of all such papers and 
documents are incorporated herein by reference. 

All of the features disclosed in this specification 
15 (including any accompanying claims , abstract and 
drawings) , and/or all of the steps of any method or 
process so disclosed, may be combined in any combination, 
except combinations where at least some of such features 
and/or steps are mutually exclusive. 

20 

Each feature disclosed in this specification 
(including any accompanying claims, abstract and drawings) 
may be replaced by alternative features serving the same, 
equivalent or similar purpose, unless expressly stated 
25 otherwise. Thus, unless expressly stated otherwise, each 
feature disclosed is one example only of a generic series 
of equivalent or similar features. 

The invention is not restricted to the details of the 
30 foregoing embodiment ( s ) . The invention extends to any 
novel one, or any novel combination, of the features 
disclosed in this specification (including any 
accompanying claims, abstract and drawings), or to any 
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novel one, or any novel combination, of the steps of any 
method or process so disclosed. . 
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Claims 

1. A method for use in creating an audiovisual 
product (400), comprising the steps of: 

5 

receiving original audiovisual data (700) intended for 
playback according to an original content sequencer- 
dividing the original audiovisual data (700) into a ■ 
10 plurality of cells (420); and 

creating- a plurality of sequence instructions (410) 
each representing a playback sequence for Splaying back the 
cells in a specified order, including: 

*■ at least one correct sequence instruction (410a). 

where the playback sequence reproduces the original 
content sequence; and 

20 a plurality- of incorrect sequence - instructions 

(410b) where the playback sequence does not reproduce the' 
original content sequence. 

2. The method of claim 1, wherein the dividing step 
25 comprises arranging the cells other than according to the 

original content sequence. 

3. The method of claim 1 or 2, comprising arranging 
the cells into a jumbled arrangement such that the 

30 original content sequence is scrambled. 



4. The method of any preceding claim, comprising 

creating relatively many of the incorrect sequence 
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instructions (410b) and relatively few of the correct 
sequence instructions (410a), such that the relatively few 
correct sequence instructions (410a) are obscured amongst 
the relatively many incorrect sequence instructions 
5 (410b). 

5. The method of any preceding claim, wherein the 
incorrect sequence instructions (410b) each result in an 
unsatisfactory playback of the audiovisual data (700) in 

10 ' . the cells. 

6. The method of any preceding claim, wherein the 
dividing step comprises adding one or more erroneous cells 
(421) that are not proper to the original content 

IS sequence. 

7. The method of claim 6, wherein the or each of the 
erroneous cells (421) contain a section of the original 
audiovisual data .(700) . 

20 

8. The method of claim 7, comprising distorting the 
original audiovisual data (700) in the erroneous cells 
(421) . 

25 9. The method of any preceding claim, wherein the 

plurality of sequence instructions (410) implement 
different variations on the way in which the audiovisual 
data (700) in the cells are played, but without 
duplicating the audiovisual data (700) itself. 

30 

10. The method of any preceding claim, wherein the 

plurality of sequence instructions (410) are formed as a 
permuted sequence such that the incorrect sequence 
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instructions (410b) are permutations of the correct 
sequence instruction (410a) . 

11. The method of any preceding -claim, comprising the 
5 steps of: 

providing a plurality of structure locations within 
the audiovisual product (400); and 

10 allocating the plurality of sequence instructions 

(410) to the plurality of structure locations, 

12. The method of claim 11, wherein: 

15 the structure location allocated to the or each at 

least one correct sequence instruction (410a) is derivable 
from an access code (80) . 

13. The method of claim 12, comprising the steps of: 

20 

defining a destination function that when applied, to 
the access code (80) derives the structure location of the 
correct sequence instruction, (410a) . 

25 14. The method of claim 13, wherein the access code 

(80) comprises a numerical value within a predetermined 
range, such that the destination function when applied to 
the numerical value of the access code (80) calculates the 
structure location of the correct sequence instruction 

30 (410a). 



15. The method of claim 14, wherein the destination 
function when applied to an incorrect numerical value 
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calculates the structure location of one of the incorrect 
sequence instructions (410b) . 

16. The method of any of claims 13 to 15, wherein the 
5 destination function comprises a one way hash function. 

17. The method of any of claims 13 to 16, wherein the 
destination function operates on at least two access codes 
each having numerical values. 

10 

18. The method of any of claims 13 to 17, wherein the 
destination function is applied to generate a first access 
code for display to a user, and to operate on a second 
access code provided in return. 

15 

19. The method of claim 18, wherein the destination 
function comprises generating a seed ' and applying a 
transformation to generate the first access code, such 
that a- seed of the first access code is not revealed to a 

20 user. 

20. The method of any preceding claim, wherein the • 
plurality of sequence instructions (410) are formed as a 
plurality of Program Chains (PGCs) . 

25 

21. The method of any preceding claim, further 
comprising: 

adding at least one erroneous cell (421) containing 
30 erroneous audiovisual data (700) to the plurality of cells 
(420) . 
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22. The method of any preceding claim, further 
comprising : 

allocating the plurality of cells (420) amongst at 
5 least a first video stream (1901) and a second video 
stream (1902); and 

creating a video stream switch instruction (2011,2021) 
to switch between the first and second video streams 
10 (1901,1902), thereby reproducing the cells (420) according 
to the original content sequence. 

23. The method of any preceding claim, wherein the 
'audiovisual product (400) is playable according to a DVD- 

15 Video specification. - 

24. The method of any preceding claim, comprising 
recording the audiovisual product (400) onto a portable 
random-access storage medium (40) . 

20 

25. The method of any preceding claim, comprising 
recording the audiovisual product (400) onto an optical 
disk (40) according to a DVD-Video specification. 

25 26. A method for use in reproducing an audiovisual 
product (400), comprising the steps of: 

receiving an audiovisual product (400) having a 
plurality of cells (420) of audiovisual data (700) whose 
30 playback is controlled by a plurality of sequence 
instructions (410), wherein the plurality of sequence 
instructions (410) include at least one correct sequence 
instruction (420) for reproducing the audiovisual product 
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(400) according to an original playback sequence, and a* 
plurality of incorrect sequence instructions (410b) which 
do not reproduce the audiovisual product (400) according 
to the original playback sequence; 

5 

selecting one amongst the plurality of sequence 
instructions (410) ; and 

reproducing the audiovisual data (700) in the cells 
10 according to the selected sequence instruction. 

27. The method of claim 26, wherein each of the 
sequence instructions (410.) has a predetermined structure 
location within the audiovisual product (400) , and the 

15 selecting step comprises: 

receiving an access code .(80); 

applying a destination function to the access code 
20 (80) and thereby determining a destination structure 
location within the audiovisual product (400); and 

jumping to the determined destination structure 
location to thereby select the sequence instruction 
25 corresponding to that location, 

28. The method of claim 27 , wherein the access code 
(80) is input by "a user during playback of the audiovisual 
product (400) , 

30 

29. The method of claim 27 or 28 , wherein the access 
code (80) is input by a user through a user input device 
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such as . a keypad or remote control unit or other 
communications device. 

30. The method of any of claims 27 to 29, wherein the 
5 destination function applied to the access code (80) is a 

mathematic function that returns a destination structure 
location dependent upon the received access code (80) . 

31. The method of any of claims 26 to 30, further 
10 comprising: 

receiving the audiovisual product (400) having 
audiovisual data (700) divided into a plurality of cells 
(420), including at least one correct cell containing 

15 . correct audiovisual data (700) proper to an original 
content sequence, and at least one erroneous cell (421) 
containing erroneous audiovisual data (700) , and at least 
one sequence instruction (410) representing a playback 
sequence for playing back selected ones of the plurality 

20 of cells' (420) in a specified order; and 

reproducing the audiovisual data (700) in the cells 
(420) according to the sequence instruction (410) . 

25 32. The method of any of claims 26 to 30, further 
comprising: 

receiving an audiovisual product (400) having a 
plurality of cells (420) of audiovisual data (700) which 
30 together represent an original content sequence, wherein 
the cells (420) are divided amongst at least first and 
second video streams (1901,1902); and 
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performing one or more video stream switch 
instructions (2011,2021) to automatically switch between 
at least the first video stream (1901) and the second 
-video stream (1902) during reproduction of the cells, 
5 thereby reproducing the audiovisual data (700) according 
to the original content sequence. 

33. The method of any of claims 26 to 30, wherein the 
audiovisual product (400) is playable according to DVD- 

10 Video specifications. 

34. The method of any of claims 26 to 30, comprising 
reproducing the audiovisual product (400) from a portable 
random-access storage medium (40) . 

15 

35. The method of any of claims 26 to 30, comprising 
reproducing the audiovisual product (400) from an optical 
disk (40) "according to a DVD-Video specification. 

20 36. A recording medium having . recorded thereon 
computer implementable instructions for performing the 
method of any of claims 1 to 35. 

37 . An authoring apparatus adapted to perform the 
25 method of any of claims 1 to 35. 

38. An audiovisual product operable to perform the 
method of any of claims 1 to 35. 



30 39. A DVD-Video recording or reproducing apparatus 
adapted to perform the method of any of claims 1 to 35. 
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